To renew your Maptician SSO SAML certificate, follow Microsoft's help article: Manage certificates for federated single sign-on, starting at the "Create a new certificate" section.

Alternatively, you can follow the step-by-step instructions below.

1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator
2. Browse to Identity > Applications > Enterprise applications > All applications.
3. Find the Maptician enterprise application and select it.

4. Select Single sign-on.

5. On the Set up Single Sign-On with SAML page, find the SAML Certificates section and select the Edit icon (a pencil). The SAML Signing Certificate page will open, which displays the status (Active or Inactive), expiration date, and thumbprint (a hash string) of each certificate.

6. Select New Certificate. A new row appears below the certificate list, where the expiration date defaults to exactly three years after the current date. (Your changes aren't saved yet, so you can still modify the expiration date.)
7. In the new certificate row, hover over the expiration date column and select the Select Date icon (a calendar). A calendar control appears, displaying the days of a month of the new row's current expiration date.
8. Use the calendar control to set a new date. You can set any date between the current date and three years after the current date.
9. Select Save. The new certificate now appears with a status of Inactive, the expiration date that you chose, and a thumbprint.

10. When you are ready activate the new certificate:
    • Select the ellipsis (...) next to the certificate.
    • Click Make certificate active. 

The status of the new certificate will change to Active, and the previously active certificate will change to Inactive. Once this step is complete, Maptician will automatically update the certificate within approximately 1hour.  If you want the certificate to immediately update in Maptician, please refer to step 11.

11. To immediately update the new certificate in Maptician, do the following:

• In your Maptician environment, browse to Settings > Environment > Single Sign-on (SSO).
• Click the green “SAVE CHANGES” button.

12. To verify that the new certificate is active and working, follow these steps:
    • Log out of Maptician and close your browser.
    • Reopen your browser and navigate to your Maptician environment.
    • Sign in using Single Sign-On (SSO) by clicking the blue "Sign-In with Microsoft" button.
    • If sign in is successful, that indicates the new certificate is now active in Maptician.

Troubleshooting Sign-In Issues

If you receive the following error when signing in, “Unable to complete authentication - Contact your Administrator”, this indicates the new certificate has most likely not yet been updated in your Maptician environment. Please wait 10-20 minutes and try signing in with SSO again, or follow the instructions in step 11 to immediately update the new certificate in Maptician.

If the issue persists, please reach out to your Maptician technical contact for further assistance.